Описание
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays
Currently defined VF/PF relay actions use regular REQUEST messages
only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT
messages as this would result in breaking the VFPF ABI protocol
and also might trigger an assert on the PF side.
(cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)
A flaw was found in the Linux kernel's drm/xe/pf component. The Physical Function (PF) incorrectly attempts to process FAST_REQUEST or EVENT messages, which are not part of the defined Virtual Function to Physical Function (VFPF) Application Binary Interface (ABI) protocol. This misprocessing can lead to a violation of the VFPF ABI protocol and may trigger an assert on the PF side, potentially resulting in a denial of service.
Отчет
A denial-of-service flaw rated moderate by Red Hat was found in the Linux kernel's drm/xe SR-IOV GuC relay handling for Intel Xe graphics. The Physical Function (PF) driver incorrectly attempts to process FAST_REQUEST and EVENT relay messages, which are not part of the defined Virtual Function to Physical Function (VFPF) ABI protocol, as if they were regular REQUEST messages. On a host using an Intel Xe GPU with SR-IOV enabled, an attacker who controls a guest Virtual Function can send such unsupported relay messages, violating the VFPF ABI protocol and potentially triggering an assertion in the host kernel, resulting in a denial of service of the host GPU virtualization service. No impact on confidentiality or integrity has been identified. The Red Hat Enterprise Linux 9 and 10 kernel and kernel-rt components and the Red Hat In-Vehicle OS 2 kernels are affected; because the impact is limited to denial of service by an attacker who already controls a VF on an affected host, the fix has been deferred to a future update, leaving that residual risk in the meantime. Red Hat Enterprise Linux 6, 7, and 8, as well as the RHEL 9.2 and 9.4 update streams, are not affected because the vulnerable code is not present in those kernels. The upstream CVE record rates this flaw as important (CVSS 8.4, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H), while Red Hat rates it moderate (CVSS 5.5, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) because the available evidence shows only a denial-of-service impact through a kernel assertion, with no demonstrated integrity or confidentiality impact.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT messages as this would result in breaking the VFPF ABI protocol and also might trigger an assert on the PF side. (cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT messages as this would result in breaking the VFPF ABI protocol and also might trigger an assert on the PF side. (cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)
In the Linux kernel, the following vulnerability has been resolved: d ...
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT messages as this would result in breaking the VFPF ABI protocol and also might trigger an assert on the PF side. (cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)
EPSS
5.5 Medium
CVSS3